ITU National Cybersecurity/CIIP Self-Assessment Tool

The ITU National Cybersecurity/CIIP Self-Assessment Tool is a practical initiative by the ITU-D ICT Applications and Cybersecurity Division to assist ITU Member States who wish to elaborate on their national approach for cybersecurity and critical information infrastructure protection (CIIP). The National Cybersecurity/CIIP Self-Assessment Tool is one of the complementary cybersecurity resources that the ITU is currently developing as part of a comprehensive Cybersecurity Toolkit for Member States.

ITU, through its Global Cybersecurity Agenda (GCA), has put in place a framework for international cooperation in cybersecurity, to provide a global platform where all relevant stakeholders can discuss and work together in order to best respond in a coordinated manner to the growing cybersecurity challenges. Each country and region, however, has its own requirements and needs, that need to be addressed taking in consideration the national and regional context.

The GCA is now moving into its operational phase and ITU is undertaking a number of efforts across its full range of activities to address cybersecurity. The ITU National Cybersecurity/CIIP Self-Assessment Tool is part of that effort. It is a practical that grew out of the work currently underway in the ITU Telecommunication Development Sector’s Study Group 1, Question 22/1: Securing information and communication networks: best practices for developing a culture of cybersecurity. This activity calls for ITU Member States and Sector Members to create a report on national best practices in the field of cybersecurity. Links to more information on Question 22/1 activities can be found on the main ITU-D cybersecurity website.

The ITU National Cybersecurity/CIIP Self-Assessment Tool is intended to assist national governments in examining their existing national policies, procedures, norms, institutions, and relationships in light of national needs to enhance cybersecurity and address critical information infrastructure protection. 

This tool is directed to policy and decision makers of governments, and addresses the policies, institutional framework, and relationships for cybersecurity. It seeks to produce a snapshot of the current state of national policy and capability, of institutions and institutional relationships, of personnel and expertise, of relationships among government entities and relationships among government, industry and other private sector entities.

ITU Global Cybersecurity Agenda

ITU Study Group Q.22/1 Report on Best Practices for a National Approach to Cybersecurity (Draft September 2009) (TIES login and password required)

Draft ITU National Cybersecurity/CIIP Self-Assessment Tool (April 2009)